User Management in ESS Portal

Dear Gurus.
I would like to request help on how to configure user management in the ESS portal by assigning to our Information Security Office (ISO) the resetting and unlocking of password only. Is this possible without giving the assigned person an SAP Application Professional license? We don't want to give this person access to R3 where he can create and assign SAP_ALL profile to himself.
We are just using SAP HCM and only HR people are given the SAP Application Professional license with access to R3. Appreciate help on this, especially if you can tell me SAP Notes or documentation that will detail the step-by-step process.
Thanks a lot.
Ariel

Hi Ariel,
Looks like this query is more related to SAP ECC (r/3) system, nothing related to portal user management. And the way i've see and also checked it's not possible to enable a ECC User only with Resetting & Unlocking the password. There are no auth-objects that can restrict the user to do so!!! This is neither possbile in Portal User Admin also..!
But still suggesting you to open a query in Basis Admin forum for admin-experts opinions.
Hope it helps!
Thanks,
MS

Similar Messages

Not able to login to User management link in portal

Hi,
I am not able to login to "User Management" link from index.html page. When I enter user name and password, only page is getting refreshed and it is not logging in.
Error from default trace:
#1.5 #00188B34FD33006C0000002800007AC8000461B1DE2BD2F2#1233316471589#com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl#sap.com/tcwddispwda#com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl#J2EE_ADMIN#2018##mysapbw_BW7_23635150#J2EE_ADMIN#c13b1ba1eec411dd9cbb00188b34fd33#SAPEngine_Application_Thread[impl:3]_2##0#0#Error#1#/System/Server/WebRequests#Plain###application [webdynpro/dispatcher] Processing HTTP request to servlet [dispatcher] finished with error.
The error is: java.lang.NoSuchMethodError: com.sap.security.core.wd.umeuifactory.wdp.IExternalUmeUiFactoryCompInterface.hasSimplePermission(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Z
Exception id: [00188B34FD33006C0000002600007AC8000461B1DE2BCF03]#
#1.5 #00188B34FD33005F000004A300007AC8000461B1E07DB217#1233316510512#com.sap.engine.services.security.authentication.logonapplication#sap.com/com.sap.security.core.admin#com.sap.engine.services.security.authentication.logonapplication.doLogon#J2EE_GUEST#0##n/a##d88d4300eec411dd9ac900188b34fd33#SAPEngine_Application_Thread[impl:3]_6##0#0#Error##Java###doLogon failed
[EXCEPTION]
#1#com.sap.security.core.logon.imp.UMELoginException
     at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.logon(SAPJ2EEAuthenticator.java:949)
     at com.sap.security.core.logonadmin.ServletAccessToLogic.logon(ServletAccessToLogic.java:208)
     at com.sap.security.core.sapmimp.logon.SAPMLogonLogic.doLogon(SAPMLogonLogic.java:914)
     at com.sap.security.core.sapmimp.logon.SAPMLogonLogic.uidPasswordLogon(SAPMLogonLogic.java:578)
     at com.sap.security.core.sapmimp.logon.SAPMLogonLogic.executeRequest(SAPMLogonLogic.java:158)
     at com.sap.security.core.sapmimp.logon.SAPMLogonServlet.doPost(SAPMLogonServlet.java:60)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Please help me in resolving this issue.
Regards,
Nallasivam.D

Hi,
After looking into the error first i dont think you are enter the right password.
In case if you are entering the right password then you might not have the necessary admin rights on portal.
Regards,
Ramanath

Weblogic Portal Exception causing user management issue in portal console

Hi,
We have weblogic 10.3 portal configured on Solaris environment. However after starting the servers, when we try to click a user in the user management console, the profile for that user will not come up. Below is the exception we are seeing in logs. Can someone plz help?
####<Nov 29, 2010 3:38:35 PM CST> <Info> <org.apache.beehive.netui.pageflow.PageFlowRequestProcessor> <nrdmde01.edc.cingular.net> <MdeManaged1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <> <> <1291066715444> <BEA-000000> <Attempting to instantiate SharedFlowControllers for request /mdePortalEarAdmin/util/tree/selectNode.do>
####<Nov 29, 2010 3:38:35 PM CST> <Info> <EJB> <nrdmde01.edc.cingular.net> <MdeManaged1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <BEA1-004038F8B87980CED400> <> <1291066715497> <BEA-010227> <EJB Exception occurred during invocation from home or business: com.bea.p13n.property.internal.EntityPropertyManager_pmrkio_HomeImpl@6e942e36 threw exception: com.bea.p13n.property.ConfigurableEntitySystemException: Error reading User-Defined property value (propertyValueId 2,001).>
####<Nov 29, 2010 3:38:35 PM CST> <Info> <EJB> <nrdmde01.edc.cingular.net> <MdeManaged1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <BEA1-004038F8B87980CED400> <> <1291066715500> <BEA-010227> <EJB Exception occurred during invocation from home or business: com.bea.p13n.usermgmt.profile.internal.UserProfileManager_mfa736_HomeImpl@35229eea threw exception: com.bea.p13n.usermgmt.profile.ProfileSystemException: com.bea.p13n.property.ConfigurableEntitySystemException: Error reading User-Defined property value (propertyValueId 2,001).>
####<Nov 29, 2010 3:38:35 PM CST> <Error> <PortalAdminTools> <nrdmde01.edc.cingular.net> <MdeManaged1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <weblogic> <> <> <1291066715512> <BEA-415125> <A ToolsException occured trying to get the resources for com.bea.p13n.controls.exceptions.P13nControlException: Remote exception trying to get properties for user weblogic__userEditor, property set RecentFavoriteItems, property RECENT_ITEM:RecentFavoriteItems.
com.bea.portal.tools.common.exceptions.ToolsException: com.bea.p13n.controls.exceptions.P13nControlException: Remote exception trying to get properties for user weblogic__userEditor, property set RecentFavoriteItems, property RECENT_ITEM
at com.bea.portal.tools.ugm.controls.ProfileManagerControlImpl.getPropertyValues(ProfileManagerControlImpl.java:544)
at com.bea.portal.tools.ugm.controls.ProfileManagerControlBean.getPropertyValues(ProfileManagerControlBean.java:239)
at com.bea.jsptools.patterns.item.ItemService$DefaultItemServiceImpl.getItems(ItemService.java:515)
at com.bea.jsptools.patterns.item.ItemService$DefaultItemServiceImpl.addItem(ItemService.java:447)
at com.bea.jsptools.patterns.item.ItemService$DefaultItemServiceImpl.addRecentItem(ItemService.java:226)
at com.bea.jsptools.util.Utilities.addRecentItem(Utilities.java:1521)
at util.tree.TreeController.setRecentItem(TreeController.java:906)
at util.tree.TreeController.updateTreeStateBeanForNewlySelectedNode(TreeController.java:693)
at util.tree.TreeController.selectNode(TreeController.java:335)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.beehive.netui.pageflow.FlowController.invokeActionMethod(FlowController.java:879)
at org.apache.beehive.netui.pageflow.FlowController.getActionMethodForward(FlowController.java:809)
at org.apache.beehive.netui.pageflow.FlowController.internalExecute(FlowController.java:478)
at org.apache.beehive.netui.pageflow.PageFlowController.internalExecute(PageFlowController.java:306)
at global.internal.AbstractBaseController.internalExecute(AbstractBaseController.java:360)
at org.apache.beehive.netui.pageflow.FlowController.execute(FlowController.java:336)
at org.apache.beehive.netui.pageflow.internal.FlowControllerAction.execute(FlowControllerAction.java:52)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:2044)
at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:91)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2116)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:556)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853)
at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631)
at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:158)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414)
at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1199)
at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1129)
at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.executeAction(ScopedContentCommonSupport.java:687)
at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.processActionInternal(ScopedContentCommonSupport.java:142)
at com.bea.portlet.adapter.scopedcontent.PageFlowStubImpl.processAction(PageFlowStubImpl.java:107)
at com.bea.portlet.adapter.NetuiActionHandler.raiseScopedAction(NetuiActionHandler.java:111)
at com.bea.netuix.servlets.controls.content.NetuiContent.raiseScopedAction(NetuiContent.java:181)
at com.bea.netuix.servlets.controls.content.NetuiContent.raiseScopedAction(NetuiContent.java:167)
at com.bea.netuix.servlets.controls.content.NetuiContent.handlePostbackData(NetuiContent.java:225)
at com.bea.netuix.nf.ControlLifecycle$2.visit(ControlLifecycle.java:180)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:324)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walkRecursive(ControlTreeWalker.java:334)
at com.bea.netuix.nf.ControlTreeWalker.walk(ControlTreeWalker.java:130)
at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:395)
at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:361)
at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:352)
at com.bea.netuix.nf.Lifecycle.runInbound(Lifecycle.java:184)
at com.bea.netuix.nf.Lifecycle.run(Lifecycle.java:159)
at com.bea.netuix.servlets.manager.UIServlet.runLifecycle(UIServlet.java:388)
at com.bea.netuix.servlets.manager.UIServlet.doPost(UIServlet.java:258)
at com.bea.netuix.servlets.manager.UIServlet.service(UIServlet.java:199)
at com.bea.netuix.servlets.manager.SingleFileServlet.service(SingleFileServlet.java:251)
at com.bea.netuix.servlets.manager.PortalServlet.service(PortalServlet.java:686)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at com.bea.jsptools.servlet.PagedResultServiceFilter.doFilter(PagedResultServiceFilter.java:82)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at com.bea.portal.tools.servlet.http.HttpContextFilter.doFilter(HttpContextFilter.java:60)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at com.bea.p13n.servlets.PortalServletFilter.doFilter(PortalServletFilter.java:336)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3502)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(Unknown Source)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2186)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2092)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
com.bea.p13n.controls.exceptions.P13nControlException: Remote exception trying to get properties for user weblogic__userEditor, property set RecentFavoriteItems, property RECENT_ITEM
at com.bea.p13n.controls.profile.PropertyControlImpl.getProperty(Unknown Source)
at com.bea.p13n.controls.profile.PropertyControlBean.getProperty(Unknown Source)
at com.bea.portal.tools.ugm.controls.ProfileManagerControlImpl.getPropertyValues(ProfileManagerControlImpl.java:512)
at com.bea.portal.tools.ugm.controls.ProfileManagerControlBean.getPropertyValues(ProfileManagerControlBean.java:239)
at com.bea.jsptools.patterns.item.ItemService$DefaultItemServiceImpl.getItems(ItemService.java:515)
at com.bea.jsptools.patterns.item.ItemService$DefaultItemServiceImpl.addItem(ItemService.java:447)
at com.bea.jsptools.patterns.item.ItemService$DefaultItemServiceImpl.addRecentItem(ItemService.java:226)
at com.bea.jsptools.util.Utilities.addRecentItem(Utilities.java:1521)
at util.tree.TreeController.setRecentItem(TreeController.java:906)
at util.tree.TreeController.updateTreeStateBeanForNewlySelectedNode(TreeController.java:693)
at util.tree.TreeController.selectNode(TreeController.java:335)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.beehive.netui.pageflow.FlowController.invokeActionMethod(FlowController.java:879)
at org.apache.beehive.netui.pageflow.FlowController.getActionMethodForward(FlowController.java:809)
at org.apache.beehive.netui.pageflow.FlowController.internalExecute(FlowController.java:478)
at org.apache.beehive.netui.pageflow.PageFlowController.internalExecute(PageFlowController.java:306)
at global.internal.AbstractBaseController.internalExecute(AbstractBaseController.java:360)
at org.apache.beehive.netui.pageflow.FlowController.execute(FlowController.java:336)
at org.apache.beehive.netui.pageflow.internal.FlowControllerAction.execute(FlowControllerAction.java:52)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:2044)
at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:91)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2116)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:556)
at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853)
at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631)
at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:158)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414)
at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1199)
at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1129)
at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.executeAction(ScopedContentCommonSupport.java:687)
at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.processActionInternal(ScopedContentCommonSupport.java:142)
at com.bea.portlet.adapter.scopedcontent.PageFlowStubImpl.processAction(PageFlowStubImpl.java:107)
at com.bea.portlet.adapter.NetuiActionHandler.raiseScopedAction(NetuiActionHandler.java:111)
at com.bea.netuix.servlets.controls.content.NetuiContent.raiseScopedAction(NetuiContent.java:181)
at com.bea.netuix.servlets.controls.content.NetuiContent.raiseScopedAction(NetuiContent.java:167)
at com.bea.netuix.servlets.controls.content.NetuiContent.handlePostbackData(NetuiContent.java:225)
at com.bea.netuix.nf.ControlLifecycle$2.visit(ControlLifecycle.java:180)

Hi,
After looking into the error first i dont think you are enter the right password.
In case if you are entering the right password then you might not have the necessary admin rights on portal.
Regards,
Ramanath

Using User Management Engine API in Portal Application

Hello,
I actually develope a simple Portal Application, which print any User-Infos. Especially I need the date of the last Login. For this purpose I read the Article Using User Management Engine API - Portal - SAP Library where they use the library com.sap.security.api. In the articel they describe also, how to set DC dependencies. But this doesn't function for a Portal Component, because they do not appear in the Component Browser.
So my question is, how get I the User Management Engine API referenced in my Portal Application, so that I can use the package com.sap.security.api. In the filesystem I can not find a JAR-File for the Development Componenten tc/je/usermanagement/api
Greetings,
Thomas

HI,
Getting the last logon date can be a small problem. There is a method called: getLastSuccessfulLogonDate, but that one is deprecated since NW 2004s.
https://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/IUserAccount.html#getLastSuccessfulLogonDate()
In NW 7.3 the method is still there: Generated Documentation (Untitled), but even so, JavaDoc states that the value is not updated automatically
"get last sucessful logon date NOTE: This attribute is not automatically updated during login."

ESS Portal - Timesheet not displaying for one user

Hello, I have a user who has always been able to access their timesheet via the ESS Portal but now when he clicks on the link for his timesheet all that returns is a blank web page. There are no errors, and it's not a browser issue because no one else is experiencing this issue and we've tried various browsers, all with the same result.
We have single sign on set up for the ESS Portal, and there is a role assigned to the user in core for them to access their timesheet via the portal.
This role has not been changed, and if it was, it would seem that all users would have been affected.
Does anyone know what I can check on the backend (HR master data, payroll, etc.) that would effect the timesheet for a specific user?
As well, is there anything I should check on the portal for this user which would affect the timesheet being displayed?
Thank you.

1. Review if his timesheet is being generated in the back-end (transaction PT61). If the time statement is generated in this transaction, the problem lies in the portal display.
2. If the time statement is not generated in this transaction, run transaction PT_ERL00 to review if there are any time evaluation errors for this employee. This report will show all error messages generated for each personnel number.
3. After reviewing errors, grab hold of a time management consultant and have him/her run time evaluation for this employee. Repeat from step 1 again.

Can I use SAP HR to drive ESS Portal user creation?

Hello
We are implementing a new instance of SAP HR and Portal for ESS and MSS and I am not sure of all the steps that need to be completed so any guidance / tips would be greatly appreciated.
Company currently has an LDAP - but not used extensively. Not all employees currently in LDAP as not all have network ids. All employees will have a SAP account to enable ESS (via Kiosks etc). ESS iViews in Portal will call SAP HR and possibly SAP BW. We have an instance of SAP already and user admin maintained via CUA - this will continue.
Scenario:
My initial thoughts are that we try to use SAP HR as the leading system to drive the ESS Portal users and access. Basically I want to create the user in SAP and assign them an ESS SAP role... then through syncronization have the user created in the Portal and have the correct ESS Portal assigned (in the Portal)
My thinking so far is to go the following way;
1) Create User Master Record in SAP (SU01)
2) Hire employee into the org structure (via HR processes)
3) Populate Infotype 0105 with SAP username
4) Populate Infortype 1016 - with SAP role to be assigned to allow ESS access (not sure about this aspect) or role could be assigned in 1) above
I am not sure of the next steps - I think there must be a way in an SAP table to map the ESS SAP role to the ESS Portal Role (is this via WP3R?)
then I am hoping that a standard job can be run (is this RSLDAPSYNC_USER) that will create the user in the Portal (UME?) and assign the correct Portal role ?
(obviously configuration needed)
For MSS and HR Power users - we would continue to assign SAP roles via SU01.
Can anyone assist with;
- Is my thinking correct in terms of how this should / could work?
- in SAP how can I map SAP Roles to Portal Roles ?
- will syncronization in SAP create the user in Portal and assign the role ? what do I need to configure?
Thanks in advance

Dear Michale,
I just dont know if this can throw some light on your prob.'
In our Orgn we had around 250 ess users and 200 sapr/3 users. Some of the r/3 users also logon to ess via their r/3 uname and password.
What we have done is like follows:
1. Created a role for only the ess users ZHRESS. For this i asked the HR functional people with sap_all profile to do all the job which the ESS users are supposed to do and tracer the authorization via tcode st01. We created the role on the basis of this trace report.
2. For the purely ESS users we created the users via tcode HRUSER and assigned then with the above role.
3. For the R/3 users who are supposed to avail the ess facility we assigned them with the role ZHRESS role in addition to the other roles assigned to them to carry out their normal R/3 transactions. Then we mapped their R/3 uname to their employee no via PA30 infotype 105.
4. Tcode HRUSER saved time which would have consumed had we done it via su01 and moreover it picked Name etc data from the HR master table. In HRUSER tcode , setting the user attributes helps to define what roles the users are to be assigned, what should be their initial password etc.
Pl let me know if it satisfies you querry.
Regards

Business Purpose field hidden in ESS portal for only one user

Hi All,
We have one wiered error while creating an expense reort in ESS portal and this is only for one employee out of 15,000 users.
Problem:
The additional information for expense type " Business Purpose " field was hidden for one employee and infact this is a required field and the rest of 14,999 users are able to see this filed while creating an expense report.
We wern't able to replicate the same error in other systems like QA/ Dev boxes with the same authorizations and even from the same laptop. This user got the same problem even by logging into different laptop.
SAP ECC 6.0 - Release 603 .
Any suggestions or ideas will appreciate.
Thanks
Anil

Thanks for the reply.
We do not normally assign the Content Admin role in EP to the end user and his back end ECC role and EP portal role is 100% equal to the other users. Audit won't allow to assign any special roles to end users.
Anil.

User Management in Portal

Hi,
I had a ECC system with users with relevant authorisations.
Now how can i setup the User Management in Portal for the users
Thaks

Have you configured UME with Portal?
What is the UME you are using?
Please check the help document
http://help.sap.com/saphelp_nw04/helpdata/en/7e/a2d475e5384335a2b1b2d80e1a3a20/content.htm
Hope this helps.
Cheers-
Pramod

ESS-portal integration with Time and Travel management(HR) in R/3

Hi,
Im doing with ESS-portal configuration with Time and Travel Management in R/3,So please kindly send me Documents for integration part.I'll b so thankful if u people send me docu as soon as possible.
send me documents to [email protected]
thanks
pavi

Hi
Please go through this functional module HRMS_BIW_EXTRACT_PY1 in r/3 side to know the exact table where u r getting the data.
There are lot of tables involved in HR-payroll info types.
As far as your problem is concerned you take one employee and go to PA20 and analyse the payroll for each week or twice a month (depends up on ur client)
run the report on the payroll cube and find out exactly what u want.
Thanks
Roopa
Assign points if help full

Exposing Portal's User Management functionality via Web Service issue

Dear experts,
I am trying to create and deploy a web service that will tap into User Management functionality (UMFactory) of the Portal. I created a Java project with a Java class with one of the methods exposed via Web Service. Since this is a Java project and not a Web Dynpro project, a number of external jars and libraries, but I don't know how to add WD_RUNTIME and I am guessing that my problem is related to that.
When trying to run the application, I receive the following error message when trying to envoke UMFactory:
java.lang.NoClassDefFoundError: com/sap/tc/logging/Location
     at com.sap.security.api.UMFactory.<clinit>(UMFactory.java:166)
     at com.hollister.getusers.GetPortalUsers.getPortalUsers(GetPortalUsers.java:75)
     at com.hollister.getusers.GetPortalUsers.main(GetPortalUsers.java:39)
Please, help.
Thanks,
Alex

Container Managed Authentication. Does everything you need.

Portal user management for SRM

Hi ,
We will be using global portal & SRM as a backend.
Portal<---->SRM<----->ERP
Which will be the best option for data sources of the User Management Engine (UME)?
Regards,
Arpit.

Repeated.

User Management Service Item in Cisco Portal

Hello,
I am right now using the CIAC portal to perform simple tasks on my infrastructure and I would like to be able to add a user to a given group in AD.
I have done the TEO process (with group and user parameters) and it works.
I have done the service request (with the form, the fields, the category, etc.) and I can fill it.
But I cannot figure out how to integrate these both elements through service link, with an agent and adapters.
Does somebody knows how to do it? Or where I can find some step by step information to do it?
Thanks by advance

Hey David,
I must have misunderstood your question as I thought you couldn't "...figure out how to integrate these both elements through service link, with an agent and adapters." - Starter Edition has a reusable approach.
I'm interested in understanding where the user management features of Starter Edition aren't quite making your grade. The requirements driving Starter Edition's feature set are as they pertain to the enterprise as a private cloud deployment. Given this environment, the two primary deployment scenarios SE addresses are 1) no external user account data source (no directory integration), 2) external data source integration using one of the three types of directory servers supported by Cloud Portal. Scenario 2 two supports user authentication only and user authentication and authorization.
Scenario 1 supports user and organization management using Cloud Portal as the data source. Scenario 2 supports a pre-populated data source under the premise that enterprises most commonly have a existing directory services they desire to integrate with the solution, which is to say that an uncommon and not natively supported scenario is one in which the enterprise has no existing user account data source, but has idle directory services they would like for the solution to populate with new user accounts created through he solution. Certainly, such a scenario may be supported by extending the solution.
Let me know how you come along.
Regards,
Lee
Sent from Cisco Technical Support iPhone App

Error in ESS portal

Hi Gurus,
We have a situation where users are trying to login to ESS portal and we can find below dump at backend in ST22.
Runtime Errors         OBJECTS_OBJREF_NOT_ASSIGNED_NO
Exception              CX_SY_REF_IS_INITIAL
Access via 'NULL' object reference not possible. The current ABAP program "SAPLHRXSS_PER_MAC" had to be terminated because it has come across a statement that unfortunately cannot be executed.
An exception occurred that is explained in detail below.
The exception, which is assigned to class 'CX_SY_REF_IS_INITIAL', was not
caught in procedure "HRXSS_PER_CLEANUP" "(FUNCTION)", nor was it propagated by a RAISING clause.
Can you please throw some light what might be the cause for this error?
Regards,
kitchlu

Hello kitchlu
your issue is usually caused by some missing or improper customizing of backend table V_T7XSSPERSUBTYP.
Please refer to IMG activity below:
Personnel Management -> Employee Self-Service -> Service-Specific Settings -> Own Data -> Define Active Subtypes and Application Case (Maintenance view V_T7XSSPERSUBTYP). Use case for the relevant scenario has to be set to use case starting with A (i.e., use case A1, A2 or A3).
Please refer to the documentation of the field as well as below notes to make sure relevant entries are not missing. Please make sure that the value of them are correct according to above comments:
- 818957 ESS PersInfo: Guide for Configuration of Use Cases
- 818958 ESS PersInfo: Important configuration tables
Thanks and Kind Regards
Ramana

User id in NW2004s Portal

Hi,
We have an NW2004s portal configured with logon ticket authentication with the backend system. When we login to the portal, the user id password combination is checked correctly.
However when we change any object (say a planning function), the change is registered against the rfc user which connects to the portal and not the user who has logged in.
Can anyone help with the config change that is required to fix this?
Thanks
Shailesh

Hi SM,
Prabhakar's suggestion is not really a good idea.
Let's say you follow Prabhakar's advice and use the user for UME-ABAP communication for ESS. What happens when someone changes the password of this user? The user administrator then changes the password in the UME system. Does the administrator of the ESS system hear of this? Maybe, maybe not. If not, the ESS system tries to connect and connect until the SAPJSF user is locked due to attempting to logon with the wrong password and suddenly the UME system can no longer connect. So from an administration standpoint this is a bad idea.
Another point is that the SAPJSF user has wide ranging authorizations for user management. I have no idea what kind of authorizations the ESS meta user needs, but I assume it is less than SAPJSF (otherwise Prabhakar's suggestion would not work). From a security standpoint it is not a good idea to give a user more authorization than he or she needs. Otherwise we could just give every user SAPALL and not worry about security.
Use separate users for separate tasks.
-Michael

ESS PORTAL PROBLEM

Hi,
Two queries in ESS portal :
1. In Field control for additional receipt information there is no time option. In one of expense type we need the time field also along with dates and description. Please suggest to add the same.
2. Earlier the system use to through error message with maximum rates while pressing the Check button, if the user puts rate beyond maximum limit. But after upgrade to EHP4 system is showing a Java exception without saving data. Please suggest to get the error messages instead of Java exception.
Regards
Prakash.

Please check the customizing table V_T7XSSSERRES (Define Resources), and the resource for the Web Dynpro application "My trips and Expenses" If the field "Window Name" is empty,then this will be problematic.
So, you have to go to the view V_T7XSSSERRES and maintain for the resource
EMPLOYEE_TRAVEL_EXPENSES_SRV_12 the URL parameter sap.xss.tra.TripSchema=01   or whichever number your schema has!
You can also check this via IMG
Travel Management
   Employee Self-Services
      Homepage Framework
        Resources
           Define Resources           >> Add Entries
In case you need it, the standard PCD role is
pcd:portal_content/com.sap.pct/every_user/com.sap.pct.erp.ess.
bp_folder/com.sap.pct.erp.ess.iviews/com.sap.pct.erp.ess.
travel_expenses/com.sap.pct.erp.ess.expenses.

User Management in ESS Portal

Similar Messages

Maybe you are looking for